Privacy Policy

When you use the Portal we collect the following information:

• Contact details you provide directly: name, email address, phone number, and (if applicable) the company you represent.
• Booking information: the spaces you book or inquire about, the dates and times, and any notes you submit with an inquiry.
• Payment information: collected and processed by Stripe. We receive a token, the last four digits of the card, the card brand, and the billing ZIP — never the full card number, expiration, or CVC.
• Technical data: IP address, browser type, device type, and pages visited. Captured automatically by the server and standard analytics for security and service-quality purposes.

We use the information above to:

• process bookings and reservations and send confirmation emails;
• follow up on tour requests and suite inquiries (front-desk staff may contact you by email or phone);
• fulfill our contractual obligations to you (delivering the space, issuing receipts, handling cancellations and refunds);
• investigate suspected abuse, fraud, or security incidents;
• improve the Portal’s usability and performance.

We do not use your information for behavioral advertising, and we do not enrich your data from third-party brokers.

All card payments are handled by Stripe in accordance with PCI-DSS requirements. Your full card number, expiration date, and CVC are transmitted directly from your browser to Stripe and never touch our servers. We retain only the limited token-and-summary data Stripe returns to us, which is necessary to associate a payment with your booking, issue refunds, and respond to chargebacks.

We do not sell your personal data. We share data only with the service providers needed to operate the Portal:

• Stripe for payment processing;
• Resend for transactional email delivery (confirmations, receipts, staff notifications);
• Adobe Sign for membership agreements and leases that require an electronic signature;
• Vercel and Neon as our hosting and database providers.

Each of these processors handles your data under their own published privacy terms and only as needed to perform the service we’ve contracted them for. We may also disclose information when required by valid legal process.

Booking records (including the customer record, booking, and payment summary) are retained for seven (7) years to satisfy accounting, tax, and audit requirements. After that period they are deleted or anonymized on a rolling basis.

Marketing communications: we send transactional email by default. If we ever introduce optional newsletters or promotional email, an unsubscribe link will appear in every message and opt-outs are honored promptly — typically within one business day. You can also email us at the address below to opt out.

Depending on the law that applies to you, you may have the right to request:

• Access to the personal information we hold about you;
• Correction of inaccurate or incomplete data;
• Deletion of your data, subject to the seven-year accounting retention noted above for booking records;
• A copy of your data in a portable format.

To exercise any of these rights, email leasing@200evbphx.com. We’ll respond within 30 days. We may need to verify your identity before disclosing or modifying records.

The Portal uses a small number of session cookies strictly to keep you signed in to the staff or member portal and to preserve your active booking through checkout. We do not use third-party advertising cookies, cross-site tracking pixels, or social-media trackers. Your browser’s “Do Not Track” signal is honored where applicable.

The Portal is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information through the Portal, contact us and we will delete it.

We use industry-standard safeguards to protect your information, including TLS encryption in transit, encrypted database storage at rest, and least-privilege access controls. No system is perfectly secure; if a breach affects your data we will notify you in accordance with applicable law.

This Privacy Policy is governed by the laws of the State of Arizona, United States, without regard to its conflict of law provisions.

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent substantive change. Continued use of the Portal after a change constitutes your acceptance of the revised policy.

For privacy questions or to exercise the rights above, email: